Purpose and legal basis of processing

(GDPR Art.13(1), point c)

These data are used for the sole purpose of replying to requests for information sent by filling in the forms.

Scope of communication

(GDPR Art.13(1), points e and f)

The data are processed exclusively by internal personnel, which are duly authorised and trained to process such data (GDPR Art. 29), which will not be disclosed to external parties, disseminated or transferred to non-EU countries. Only in the event of an investigation may they be made available to the competent authorities. If this is not the case, it shall be specified in the relevant form.

Processing methods

(GDPR C. 39)

Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.

Period of data retention

(GDPR Art.13(2), point a)

Data are generally stored for short periods of time, for the sole purpose of fulfilling the requests received.

Provision

(GDPR Art.13(2), point f)

Data are provided voluntarily by the data subjects.

Lawfulness

(GDPR Art.6(1) 

Data processing is necessary in order to reply to the requests received, therefore consent is given by filling in the forms.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Personal data sent by the data subject by sending a CV or filling in the fields provided for this purpose.  The data are processed prior to entering into a contract, for the purpose of pre-contractual activities leading to the formalisation of a possible employment contract and related legal obligations.

Scope of communication

(GDPR Art.13(1), points e and f)

The data are processed exclusively by internal staff, employed by the HR Department, which are duly authorised and trained to process them (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. In other cases, it will be specified in the relevant form.

Period of data retention

(GDPR Art.13(2), point a)

Data are retained for two years

Provision

(GDPR Art.13(2), point f)

The provision of personal data is optional; however, failure to provide such data and to give consent to their processing may make it impossible for the company to correctly assess the position for the purpose of recruitment and, as a result, make it impossible for the company to manage the application.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Data are collected and used in such a way as to:

-        enter into contractual/professional relationships,

-        to fulfil pre-contractual, contractual and fiscal obligations arising from existing relationships and to manage the necessary related communications;

-        to fulfil the obligations imposed by law, a regulation, Community legislation or an order of the Authority;

-        to exercise a legitimate interest and right of the Data Controller (such as: the right to legal defence, protection from creditor claims, routine in-house operational, management and accounting requirements).

Scope of communication

(GDPR Art.13(1), points e and f)

The data are processed exclusively by internal personnel, which are duly authorised and trained to process such data (GDPR Art. 29), which will not be disclosed to external parties, disseminated or transferred to non-EU countries. If this is not the case, it shall be specified in the relevant form.

Processing methods

(GDPR C. 39)

Personal data are processed automatically and on paper.

Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.

Period of data retention

(GDPR Art.13(2), point a)

Data are normally retained for short periods of time that are strictly necessary to fulfil contractual or regulatory obligations.

Provision

(GDPR Art.13(2), point f)

Data are requested by the undersigned for the specified purposes.

Lawfulness

(GDPR Art.6(1) 

Data processing is necessary in order to establish contractual relations, which means that consent is not required.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

The information gathered is used to identify data subjects in order to provide information by sending out newsletters or in any other way described in the relevant form, and regarding products/services.

Scope of communication

(GDPR Art.13(1), points e and f)

The categories of data processors who will process the data for the above-mentioned purposes are those who manage the website, customer service and information systems, along with third-party companies (GDPR Art. 28) that carry out the relevant data processing on behalf of the undersigned (including, by way of example but not limited to, IT service maintenance, etc.). The collected data may also be communicated to the authorities legitimately entitled to receive them.

The data are processed exclusively by staff, which are duly authorised and trained to process them (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. If this is not the case, it shall be specified in the relevant form.

Processing methods

(GDPR C. 39)

Personal data are processed by automated means.

Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.

Period of data retention

(GDPR Art.13(2), point a)

Data are normally stored until data subjects withdraw their consent.

Provision

(GDPR Art.13(2), point f)

Data are voluntarily provided by the data subject when subscribing to informative newsletters.

Lawfulness

(GDPR Art.6(1) 

Data processing is optional for sending informative messages; therefore, they are sent only after consent has been given.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

The information gathered is used to identify data subjects for marketing purposes and to carry out promotional activities by sending newsletters or in any other way described in the relevant form, regarding products/services purchased or other types of products/services, novelties and promotional offers of the undersigned.

Scope of communication

(GDPR Art.13(1), points e and f)

The categories of data processors who will process the data for the above-mentioned purposes are those who manage the website, customer service, marketing activities and information systems, along with third-party companies that carry out the relevant data processing on behalf of the undersigned (GDPR Art. 28). The collected data may also be communicated to the authorities legitimately entitled to receive them.

The data are processed exclusively by staff, which are duly authorised and trained to process them (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. If this is not the case, it shall be specified in the relevant form.

Processing methods

(GDPR C. 39)

Personal data are processed by automated means.

Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.

Period of data retention

(GDPR Art.13(2), point a)

Data are stored for up to 24 months after being collected, after which consent is renewed if the data subjects are interested.

Provision

(GDPR Art.13(2), point f)

Data are voluntarily provided by the data subject when subscribing to promotional/commercial newsletters.

Lawfulness

(GDPR Art.6(1) 

Data processing is optional for receiving promotional/commercial messages; therefore, they are sent only after consent has been given.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Such data are used for the sole purpose of obtaining statistical information on the use of the website and to make sure it is working properly. The data could also be used to ascertain responsibility if computer crimes against the website were to occur (legitimate interests of the data controller).

Scope of communication

(GDPR Art.13(1), points e and f)

The data are processed exclusively by internal personnel, which are duly authorised and trained to process such data (GDPR Art. 29), which will not be disclosed to external parties, disseminated or transferred to non-EU countries. Only in the event of an investigation may they be made available to the competent authorities. In other cases, it will be specified in the relevant form.

Period of data retention

(GDPR Art.13(2), point a)

Data are generally retained for short periods of time, unless they are required to be retained for longer periods of time in connection with surveys.

Provision

(GDPR Art.13(2), point f)

Non-identifying data are collected independently, with no need to request consent.

Identifying data is optionally provided by the data subject after giving consent.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Data subjects are required to provide personal data in order to process registration requests on the Shop Online website. The provision of the data contained in the registration and/or product purchase form, along with the additional personal data required for the purpose of payment and for delivering the goods, is aimed at processing the order and finalising the contract.

Scope of communication

(GDPR Art.13(1), points e and f)

Authorised data processors who will process the data for the above-mentioned purposes include those who manage the website, accounting, customer service and information systems, along with third-party companies that process data on behalf of Davines S.p.A. (including, by way of example but not limited to, IT service maintenance, shippers and carriers, legal advisers, companies involved in the implementation and/or management of promotional campaigns, etc.). Such data may also be communicated to the authorities legitimately entitled to receive them.

In order to get a full list of those in charge of processing the data collected, we invite data subjects to contact our Customer Service.

The collected data will not be disclosed to external parties, disseminated or transferred to non-EU countries. In other cases, it will be specified in the relevant form.

Period of data retention

(GDPR Art.13(2), point a)

The collected data are stored only for the time necessary for the services requested to be provided.

Provision

(GDPR Art.13(2), point f)

It is mandatory to provide data for the above-mentioned purposes so that the services requested can be provided.

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

The information collected identifies data subjects for profiling purposes, that is, in relation to their purchasing habits and/or preferences, browsing or other identifying data generated by the devices, applications, tools and protocols used, such as IP addresses, temporary markers (cookies) or other identifiers, in order to analyse this data and propose marketing and remarketing services.   

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

The categories of people in charge of processing data for the above purposes are the people in charge of managing the site, the customer service, the marketing activities, the IT systems, as well as third companies that process data on behalf of the company (GDPR Art. 28); data may be communicated to the authorities entitled to receive them. 

Your data will be processed only by staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Your personal data will be processed by automated systems. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

Data are stored up to 12 months following collection, then consent must be renewed if data subjects are interested to do so. 

Provision 

(GDPR - Art.13, par. 2, f) 

The data are provided by the data subjects on an optional basis for profiling purposes with regards to promotional/marketing activities.  

Legal basis 

(GDPR - Art.6, par. 1). 

Processing is optional for activating the profiling service, therefore consent must be given to carry this out. 

Focus: Retargeting / Remarketing / Advertising Information   

This website uses remarketing technologies to communicate, optimize and process advertising based on the visit of the data subjects to this website. In particular, the information collected (IP address and email address) is transmitted to the following partners with whom the remarketing activities are associated in order to classify the users of the website into user groups. Based on the different user groups, personalized advertisements for DAVINES SpA products and services are proposed to users on other websites or applications. 

The processing is carried out on the legal basis of the user's consent (art. 6 c. 1 letter a of the GDPR), which can be revoked at any time. Users may also opt out of certain advertising features through the corresponding device configuration options, such as the mobile advertising configuration options or the general advertising configuration. 

• Google Customer Match   

The Customer Match function allows advertising messages to be displayed to the user even after visiting this website and authenticating (logging in) to Google services, as well as searching Google, YouTube or using Gmail through the Google Adwords service. The user information provided to Google is stored as part of the Google Adwords service and is only used to provide the service to DAVINES SpA. Users can disable the use of cookies by Google by installing the plug-in provided at the following link:www.google.com/settings/ads/plugin. 

•  Facebook Pixel  

This website uses Facebook counting pixel to measure conversion. Tracking pixels are small, pixel-sized pieces of software on this website that create a connection between the user's visit to the website and Facebook. When the pixel is loaded, Facebook installs a so-called "fr" biscuit on the user's computer, which helps Facebook to offer more personalised advertising, but also to measure and improve advertising. When the "fr" biscuit is installed, Facebook can track the user's browsing behaviour through other websites that have used a Facebook Pixel or a Facebook Social plugin. For more information, please visit the following links:https://www.facebook.com/policies/cookies/ andhttps://it-it.facebook.com/help/568137493302217. To deactivate, please visit the following link:https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (after logging in). 

For further information, please refer to the Cookie Policy. 

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Data subjects are required to provide personal data in order to process registration requests for the digital event of interest. The e-mail address will only be used to finalise registration for the chosen events and to send reminders about the event of interest to the data subjects.

Scope of communication

(GDPR Art.13(1), points e and f)

Authorised data processors who will process the data for the above-mentioned purposes include those in charge of organising and managing events, customer service and information systems, along with third-party companies providing support in certain cases, including IT service maintenance, event organisation, etc. Such data may also be communicated to the authorities legitimately entitled to receive them.

The collected data will not be disclosed to external parties, disseminated or transferred to non-EU countries. In other cases, it will be specified in the relevant form.

Period of data retention

(GDPR Art.13(2), point a)

The collected data are stored only for the time necessary for the services requested to be provided in connection with the digital events organised.

Provision

(GDPR Art.13(2), point f)

It is mandatory to provide data for the above-mentioned purposes, for the sole purpose of granting registration for the digital events organised by the undersigned.

Purpose and legal basis of processing

(GDPR Art.13(1), point c)

Data subjects are required to provide personal data for the purpose of following up on statements in which they give consent to Davines S.p.A. to publish their images on Social Networks, and which data subjects have indicated to this effect (“UGC”).

Scope of communication

(GDPR Art.13(1), points e and f)

Authorised data processors who will process the data for the above-mentioned purposes include those who manage the social media pages owned by Davines S.p.A. and information systems, and any third party companies that process the data on our behalf (such as, IT service maintenance of the IT, other forms of maintenance, etc.).

The collected data will not be disclosed to external parties, disseminated or transferred to non-EU countries. In other cases, it will be specified in the relevant form.

Period of data retention

(GDPR Art.13(2), point a)

The collected data is only stored for the time required to publish the images specified for the Davines S.p.A. “UGC” service.

Provision

(GDPR Art.13(2), point f)

The provision of data is necessary for “UGC” Davines S.p.A. to be able to disclose the images.